AI Daily Grind // AI news, freshly ground daily
Today Edition #11 7 tokens 7 min read

November starts with holes in the labs' own walls

Cover illustration for Sunday, November 1, 2026

Bonjour, and happy Sunday. October is over, and November starts with a familiar feeling. Researchers showed how they took over ChatGPT accounts, and a report from last week says a startup broke into Anthropic in 12 hours. At the same time, criminals now use AI models to decide which victims are worth the most.

Look at how the labs answer. Anthropic is closing doors on Claude: game cloning, reverse engineering and, users say, anything about training bigger models. It also sent thousands of Claude agents to attack its own safety monitors, and they found a blind spot. I keep asking the same question: when the builders lock their own tools this hard, and ask for rules, what do they know that we don't? And when the rules are private, who checks them? Six months ago, I trusted the labs more to protect the public. Today, they struggle to protect their own house.

What to watch: Tuesday's US election, because a Democratic House could bring AI hearings. Watch OpenAI's funding round, and any new details on the Anthropic breach. One small thing to do today: check which AI tools and extensions can reach your accounts.

New to a word in this story? Learn: Context window · Language model

  1. 01 Two AI labs, two security holes in their own house Safety
  2. 02 Claude locks more doors: games, reverse engineering, bigger models Policy
  3. 03 Malware now asks an AI: how much is this victim worth? Safety
  4. 04 Anthropic sends thousands of Claude agents to break its own safety checks Research
  5. 05 OpenAI reportedly lowers its funding target Business
  6. 06 Five small open models beat a big one, and agents come to your phone Open source
  7. 07 Judge lets NAACP pollution lawsuit against xAI move forward Policy
🖤☕ This week's Café Noir · Opinion October Should Scare You. The Agents Stopped Taking No for an Answer Four true stories, one pattern, and a clock that is running faster than we are. Read them, then act. Read Lange Cornu's take →
Morning Token 01 🛡️ Safety

Two AI labs, two security holes in their own house

Yesterday we saw an official Claude Code extension backdoored on Cursor. Today, two more stories hit the labs directly. Parameter Labs published "How we took over ChatGPT accounts". It got 330 points on Hacker News, and Simon Willison wrote about it.

The attack targets ChatGPT's HTML previews. These are small interactive web apps that ChatGPT shows inside a sealed box, called a sandbox. That box must stay closed, so untrusted code cannot reach OpenAI's systems or your private data. The researchers found a complex chain of steps to get around it and take over accounts.

Second, India Today reported on October 26 that an AI startup hacked Anthropic in 12 hours, gaining access to employee details and internal messages. Our information is thin: we only have the headline, not the startup's name or Anthropic's response. We also do not know from our sources how OpenAI fixed its issue, so read the full write-ups before you panic.

Why it matters

These companies hold our chats, our code, and soon our agents. Three security stories in two days, all touching the biggest labs, is a pattern worth noticing. If the builders cannot keep their own doors shut, we should be careful with what we hand them.

Morning Token 02 ⚖️ Policy

Claude locks more doors: games, reverse engineering, bigger models

Follow-up to Sunday Oct 25: AI labs lock down hacking skills, and open models follow

Remember last Sunday's token on labs locking down hacking skills? Then, a tool called REA was blocked by Claude one day after launch. Now the walls are higher. Tom's Hardware and Mashable report that Claude now blocks attempts to recreate or clone video games.

Users say the block goes further: normal reverse engineering and even basic troubleshooting get refused. Reverse engineering means taking apart software to see how it works, often for repair, security or research. Separately, a post on X says Anthropic blocks users for anything touching the training of larger models. It got 350 points and 206 comments on Hacker News, but it is a user claim, not an official rule we have seen.

Anthropic writes these limits itself, with no public process. Expect more complaints from developers, and maybe some changes if legitimate work keeps getting blocked.

Why it matters

When the builders restrict their own AI this hard, it is fair to ask: what are they seeing that we don't? And when the rules are private, nobody outside can check if they are fair, too strict, or too weak.

Morning Token 03 🛡️ Safety

Malware now asks an AI: how much is this victim worth?

An infostealer is malware that steals passwords, browser cookies and other logins from your computer. Cisco's Talos security team looked at one called Volta. Its report title says it all: "Appraisal by AI: model-driven victim prioritization."

In simple words, Volta uses a language model to rank its victims by how valuable they are. The criminals can then focus first on the people and companies worth the most. The story got 248 points and 131 comments on Hacker News.

We have only the report's headline and summary, not every technical detail. But the direction is clear: AI is helping criminals with the boring business part of crime, not only the hacking itself.

Why it matters

Sorting stolen data used to take time, and that slowness gave victims a little room. AI removes that delay. Use a password manager, turn on two-factor login, and do not keep important accounts logged in on shared computers.

Sources Cisco Talos ↗
Morning Token 04 🔬 Research

Anthropic sends thousands of Claude agents to break its own safety checks

Before training an AI, labs use monitors: tools that check the training data for content that could make the model misbehave. On October 31, Anthropic's Alignment Science team tested those monitors in a new way. Instead of human testers, it used thousands of Claude agents.

Each agent had to build a training dataset of up to 5,000 examples. The goal: make a small research model misaligned, meaning it no longer behaves as intended, while still passing a monitor similar to the ones Anthropic uses in production. The agents could even inspect the exact monitor and test their data against it. They found a blind spot.

This is research, shared on Reddit, and the full details of the blind spot are not in our sources. Anthropic will likely use it to fix its monitors.

Why it matters

Good news first: a lab is attacking its own safety tools and publishing the result. And still, the lesson is uncomfortable. AI agents are now better at finding holes in AI safety checks than the checks are at stopping them.

Morning Token 05 💼 Business

OpenAI reportedly lowers its funding target

Follow-up to Saturday Oct 31: The AI money machine wobbles: stocks, OpenAI, and a 'junk' rating

Yesterday we saw the AI money machine wobble, with stock drops and a possible "junk" rating for Anthropic. Now it is OpenAI's turn. TechCrunch reports that OpenAI lowered the target for its new funding round, which does not seem to meet expectations. The report gives no exact numbers in our sources, so treat it as a signal, not a verdict.

There is also a change for users. OpenAI's help center explains that ChatGPT and Codex usage limits are merging. Codex is OpenAI's coding agent, so heavy coders and chat users will now share one pool. It got 124 points on Hacker News.

Meanwhile, Apple's new CEO says the company does not want to "ship AI for AI's sake", a calmer tone than the rest of the industry.

Why it matters

When money gets tighter, companies squeeze limits and prices. If you depend on one AI tool for work, keep an eye on your usage and have a backup plan.

Morning Token 06 📦 Open source

Five small open models beat a big one, and agents come to your phone

An open-weight model is one you can download and run on your own computer. A project called Memdoor made a team of five Qwen3.8-27B models work together on hard coding problems. The author says the team beats a larger model, Fable 5, on LiveCodeBench Hard, a tough coding test. It got 230 points on Hacker News; it is one project's own result, not an independent review.

On r/LocalLLaMA, a user says a 64 GB Mac now runs Qwen3.8 27B as a coding agent with a huge 256k context, using about 50 GB of memory. On GitHub, DeepSeek shared a "superagent" prototype for more autonomous agents, and Mika, an on-device Android agent that operates your apps and the web, got over 3,000 stars.

Great news for privacy and cost. But an agent that taps through your phone apps has a lot of power, so start slowly.

Why it matters

Strong AI no longer needs a big cloud company, which is good for privacy and independence. But the same tools put autonomous agents on our phones and laptops, with fewer safety checks than ever.

Morning Token 07 ⚖️ Policy

Judge lets NAACP pollution lawsuit against xAI move forward

AI runs in huge data centers, and they need a lot of power. The NAACP, a major US civil rights group, sued xAI, Elon Musk's AI company now owned by SpaceX. The lawsuit says xAI's data center violates the Clean Air Act, the US law that limits air pollution.

A judge has now allowed the case to move forward. That is not a ruling on who is right, only a green light to continue. On Thursday we saw local fights against data centers grow, and this case takes that pushback to court.

Why it matters

The cost of AI is not only in dollars. It is also in the air that neighbours breathe. Who benefits from the model, and who lives next to the turbines, are often not the same people.

Sources TechCrunch ↗
le_dernier_mot.txt

October is over, but its lesson stays: the labs cannot be our only guards. Voilà, check your accounts, enjoy your coffee, and see you tomorrow.